I have a USG50 latest firmware but now with home internet speeds going up past what it can handle with extra security services on like AppPatrol or IDP I was wondering if there is any possibility with these device of at least configuring up a rule/setting somehow that would let say a specific TCP port like SSL be able to completely bypass IDP/AV/AppPatrol stopping any speed degradation for those connections while leaving IDP on for everything else.
I know this is not very likely but I had to try to see if anyone here has an idea. Strange thing is with the zyxel USG that even having IDP active and no rules enabled still causes the over-all performance hit.
example of speed hit even with encrypted traffic that the zyxel USG does not fully scan anyway.
Any normal traffic with all features a known max of around 30Mbps
Encrypted traffic with all features On that bypasses some of the packet scanning around 50Mbps
Turn AV/IDP & AppPatrol completely off and I can get my full 100Mbps (Max local test 250)
Having any one of the above three totally kills the speed as expected due to processing limitations but even if they have NO Rules or such enabled outside the main component checkmark.
Either way would love to know if someone has an idea to try for bypassing the throttling effect for certain traffic or for that matter if the experienced of you even think IDP at the router level is worth caring about for the home user with full software protection already on each PC anyway.
Thanks
↧